On Thu, Aug 25, 2011 at 18:16:17 +0200, Jiri Denemark wrote:
---
Notes:
Version 2:
- use virSecurityManagerSetProcessFDLabel instead of
virSecurityManagerSetImageFDLabel since the correct label for
TCP sockets appears to be svirt_t and not svirt_image_t
Apparently this isn't right either. Relabeling a socket of an already
established connection is not a good idea since it may even break the
connection. I'll post a v3 that labels this in a different way.
Jirka